$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa File: 152e21f1-be01-3eed-b70b-7e89b149fa70.roa (raw, json) Hash identifier: 7itUjSlPDD7VaZwQ9zsC6K/d3Hy78kPR9yCUp/39ayc= Subject key identifier: D1:43:B4:06:DC:6E:66:18:B0:5C:EF:35:41:92:03:56:BF:30:6B:6A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE883FC67A422E35CD29EE638 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa Signing time: Tue 19 Aug 2025 12:34:14 +0000 ROA not before: Tue 19 Aug 2025 12:34:14 +0000 ROA not after: Mon 17 Nov 2025 13:34:14 +0000 asID: 396597 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:83:fc:67:a4:22:e3:5c:d2:9e:e6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 19 12:34:14 2025 GMT Not After : Nov 17 13:34:14 2025 GMT Subject: CN=d28d2194-2364-4300-9448-8246e9d78443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d0:7f:47:af:8a:e6:46:e4:26:cc:60:5d:a3: 9f:dc:ff:be:84:cb:1b:6a:e8:0a:9d:05:49:4c:f9: 38:ab:82:9d:bd:6d:ee:e9:11:c8:8a:23:b0:b0:dd: fb:7c:ef:36:80:0b:99:2c:88:97:52:3e:a4:72:3b: 94:6a:a0:7b:5e:df:9d:4d:dc:01:36:41:2e:e5:fb: a6:b8:01:cc:98:7b:d5:ea:59:dc:4c:d9:9d:1a:c4: d9:06:9a:31:38:3f:1c:a8:12:3c:62:63:6e:e1:24: ad:25:81:c5:7e:79:9f:33:e4:23:49:bb:ac:76:6f: 4c:8e:30:7d:dd:e3:5e:9c:35:ec:12:0a:01:47:73: 5b:f8:d8:6e:fd:f0:a3:c3:0a:b2:2c:92:bd:67:73: 7b:bc:da:1f:33:ea:62:c9:3c:4e:2a:22:b6:12:91: 57:0b:ab:96:fa:da:55:8f:c0:7b:5e:ff:ad:f4:4b: ab:75:57:ed:dc:35:67:c7:08:79:6b:33:50:0b:b3: 57:f8:5b:cd:d0:36:8a:a9:91:38:9b:ec:62:70:60: bc:c0:e7:c4:1e:77:3c:4c:87:9e:43:af:bc:8a:ec: c7:23:2b:1d:50:b8:90:b2:af:d3:01:40:d8:78:d2: a9:b3:d3:e7:39:23:77:a9:47:3c:38:54:50:a6:49: f1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:43:B4:06:DC:6E:66:18:B0:5C:EF:35:41:92:03:56:BF:30:6B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e6:4d:46:3e:7a:86:e4:fc:6d:b8:c4:96:53:63:29:06:3f: c5:5b:00:df:7d:3d:6e:1d:d7:6a:6a:c2:8a:8e:67:9b:7c:b8: 5a:da:1a:49:eb:8d:80:2d:06:6e:23:34:83:ac:7d:c5:e0:e5: 32:66:ec:00:48:41:24:de:ac:1d:50:7f:ab:47:ed:0a:91:cf: 7a:6d:28:67:9d:47:b5:f6:ac:8a:1d:c6:f1:08:54:ad:1f:54: 43:fc:16:05:d6:77:9e:e0:8d:3d:1e:9d:8f:17:c9:23:bd:30: 66:4c:ca:ea:19:ac:68:6f:f4:69:39:e2:16:e5:6f:f8:7f:c8: c8:13:82:b9:ee:a2:23:ed:e5:6f:f9:6c:a4:2a:3d:47:13:7a: a5:e4:c4:ce:b9:8a:36:2c:24:c3:6a:52:b7:f0:8b:50:5b:00: da:84:ff:2f:b0:d4:c9:71:1e:e4:81:e6:69:6c:2c:3d:5d:d7: cc:85:17:0b:ee:7b:5b:30:04:6c:a9:48:6b:06:04:4f:65:51: 95:24:49:64:65:91:72:36:58:3b:dd:c5:fc:d4:7f:c7:26:11: 3f:25:4e:8c:0b:43:85:5d:1a:5e:6d:e6:61:a4:c7:b4:b7:4e: e1:7d:12:6e:77:27:fc:46:f4:ec:26:d3:c5:1d:e9:36:dc:1d: 14:2b:12:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/xnpCLjXNKe5jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxOTEyMzQxNFoXDTI1MTExNzEzMzQxNFowLzEtMCsGA1UEAxMk ZDI4ZDIxOTQtMjM2NC00MzAwLTk0NDgtODI0NmU5ZDc4NDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtB/R6+K5kbkJsxgXaOf3P++hMsbaugKnQVJ TPk4q4KdvW3u6RHIiiOwsN37fO82gAuZLIiXUj6kcjuUaqB7Xt+dTdwBNkEu5fum uAHMmHvV6lncTNmdGsTZBpoxOD8cqBI8YmNu4SStJYHFfnmfM+QjSbusdm9MjjB9 3eNenDXsEgoBR3Nb+Nhu/fCjwwqyLJK9Z3N7vNofM+piyTxOKiK2EpFXC6uW+tpV j8B7Xv+t9EurdVft3DVnxwh5azNQC7NX+FvN0DaKqZE4m+xicGC8wOfEHnc8TIee Q6+8iuzHIysdULiQsq/TAUDYeNKps9PnOSN3qUc8OFRQpknx7QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNFDtAbcbmYYsFzvNUGSA1a/MGtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUyZTIxZjEtYmUwMS0z ZWVkLWI3MGItN2U4OWIxNDlmYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA15k1GPnqG5PxtuMSWU2MpBj/FWwDffT1uHddq asKKjmebfLha2hpJ642ALQZuIzSDrH3F4OUyZuwASEEk3qwdUH+rR+0Kkc96bShn nUe19qyKHcbxCFStH1RD/BYF1nee4I09Hp2PF8kjvTBmTMrqGaxob/RpOeIW5W/4 f8jIE4K57qIj7eVv+WykKj1HE3ql5MTOuYo2LCTDalK38ItQWwDahP8vsNTJcR7k geZpbCw9XdfMhRcL7ntbMARsqUhrBgRPZVGVJElkZZFyNlg73cX81H/HJhE/JU6M C0OFXRpebeZhpMe0t07hfRJudyf8RvTsJtPFHek23B0UKxJG -----END CERTIFICATE-----Generated at Sat Aug 23 13:49:38 2025 by rpki-client